Create inventory order

POST/api/v1/purchase-orders

Create a new purchase order for inventory restocking.

Operation ID: create_order_purchase_orders·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Request body

Schema: InventoryOrderCreate

vendor_idstringrequired: Vendor UUID.
statusstringrequired: Order status (draft, submitted, confirmed, received, cancelled).
namestringrequired: Order name/title.
po_numberstringrequired: Purchase order number.
line_itemsarray · LineItem: Products being ordered.
feesarray · Fee: Additional fees (shipping, handling, etc.).
paymentsarray · Payment-Input: Payments made on this order.
descriptionstring: Order notes.
totalinteger: Total order amount in cents (calculated if not provided).
balanceinteger: Remaining balance in cents (total minus payments).
shipping_costinteger: Freight/shipping cost in cents.
ship_from_location_idstring: Source location; defaults to vendor.default_location_id.
ship_to_location_idstring: Destination location.
production_run_idstring: Linked production run (for copacker orders).
expected_delivery_datestring · date: Expected delivery date (YYYY-MM-DD).
payment_term_idstring: Payment term ID for net terms (defaults to vendor's).
expected_paid_onstring · date: Expected payment date (YYYY-MM-DD). Auto-calculated from delivery + net terms if not provided.

Responses

201Successful Response

Schema: app__core__success__SuccessEnvelope_OrderResponse___2

successboolean
messagestring
codestring
dataapp__api__v1__schemas__inventory__inventory__OrderResponse

400Bad Request - Invalid input

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

401Unauthorized - Missing or expired token, an MCP OAuth token used against the REST API, or no access to this business

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

403Forbidden - Insufficient permissions

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

422Validation Error

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

Code samples

POST/api/v1/purchase-orders

bash

curl -X POST 'https://api.ondayzero.com/api/v1/purchase-orders' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID' \
  -H 'Content-Type: application/json' \
  -d '{
  "description": "Monthly restock order",
  "fees": [
    {
      "amount": 5000,
      "name": "Shipping"
    }
  ],
  "line_items": [
    {
      "quantity": 100,
      "unit_price": 1200,
      "variant_id": "019ab37c-0a71-7000-8000-000000000001"
    }
  ],
  "name": "January Inventory Restock",
  "po_number": "PO-2024-001",
  "status": "draft",
  "vendor_id": "019ab37c-ae0d-7000-8000-000000000001"
}'